OfflineSetupProvider.dll

  • File Path: C:\Windows\SysWOW64\Dism\OfflineSetupProvider.dll
  • Description: DISM OfflineSetup Provider

Hashes

Type Hash
MD5 7D259A9EBC0C58EA43514B4FA6C2532F
SHA1 8CE3CC93648EBCD8FCCFECD2A138877B2768D931
SHA256 5880478C9FFBB8BE32F6E066CAFC56B449DA7A76DCBC75B971A185810897A284
SHA384 10A84FD5C6D6957E392F81484AD4B38E6A7797EFEB3038201E770B2F6A79D6509DCF4AC52A27487C7C8CA19A84DB1D7D
SHA512 AE3C3A46378305A295D339855EA7D5F9CC4DAD7137144105BD95CD7BA383E10CAAC7AE5B29B54F1973EDF98CA24FE9AE9DAFF8B4193DE797555AB632F38658E2
SSDEEP 3072:qty7WY0QuOy/cxL6uPCYeG6bnLtZ0W5fBwXt:c8Tuds62KGkL70W/i
IMP B5C7F9BBEE24B16D7B2A50E1FB881529
PESHA1 41701DBFCFD2004BACA697427D94750CE336C158
PE256 F4BA82F95781EF2904D2952CA4909730355B8B222247AF4227555F880305EB8D

DLL Exports:

Function Name Ordinal Type
DllRegisterServer 4 Exported Function
DllUnregisterServer 5 Exported Function
DLLGetDISMProviderCLSID 1 Exported Function
DllCanUnloadNow 2 Exported Function
DllGetClassObject 3 Exported Function

Signature

  • Status: Signature verified.
  • Serial: 3300000266BD1580EFA75CD6D3000000000266
  • Thumbprint: A4341B9FD50FB9964283220A36A1EF6F6FAA7840
  • Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
  • Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

  • Original Filename: OfflineSetupProvider.dll.mui
  • Product Name: Microsoft Windows Operating System
  • Company Name: Microsoft Corporation
  • File Version: 10.0.19041.1 (WinBuild.160101.0800)
  • Product Version: 10.0.19041.1
  • Language: English (United States)
  • Legal Copyright: Microsoft Corporation. All rights reserved.
  • Machine Type: 32-bit

File Scan

  • VirusTotal Detections: 0/66
  • VirusTotal Link: https://www.virustotal.com/gui/file/5880478c9ffbb8be32f6e066cafc56b449da7a76dcbc75b971a185810897a284/detection/

MIT License. Copyright (c) 2020-2021 Strontic.